feat(linux): add linux user extension

closes TryGhost#189
- add linux extension that creates a `ghost` user on the system, used by systemd (and potentially any other process manager)

Author: acburdine

extensions/linux/index.js

@@ -0,0 +1,63 @@
+'use strict';
+
+const os = require('os');
+const chownr = require('chownr');
+const execa = require('execa');
+const Promise = require('bluebird');
+
+const cli = require('../../lib');
+
+class LinuxExtension extends cli.Extension {
+    setup(cmd, argv) {
+        if (argv.local) {
+            return;
+        }
+
+        cmd.addStage('linux-user', this.addGhostUser.bind(this), null, 'a ghost system user');
+    }
+
+    addGhostUser(argv, ctx, task) {
+        if (os.platform() !== 'linux') {
+            return task.skip('Platform is not linux');
+        }
+
+        try {
+            execa.shellSync('id ghost');
+            return task.skip('Ghost user already exists')
+        } catch (e) {
+            if (!e.message.match(/no such user/)) {
+                return Promise.reject(e);
+            }
+        }
+
+        return this.ui.listr([{
+            title: 'Creating ghost system user',
+            task: (ctx) => {
+                ctx.user = {};
+                return this.ui.sudo('useradd --system --user-group ghost').then(() => {
+                    return Promise.all([
+                        execa.shell('id -u ghost'),
+                        execa.shell('id -g ghost')
+                    ]);
+                }).then((result) => {
+                    ctx.user.uid = result[0].stdout;
+                    ctx.user.gid = result[1].stdout;
+                });
+            }
+        }, {
+            title: 'Changing directory permissions',
+            task: (ctx) => {
+                return Promise.fromCallback(cb => chownr(ctx.instance.dir, ctx.user.uid, ctx.user.gid, cb));
+            }
+        }, {
+            title: 'Adding current user to ghost group',
+            task: (ctx) => {
+                return execa.shell('id -un').then((result) => {
+                    return this.ui.sudo(`usermod --append --groups ghost ${result.stdout}`);
+                });
+            }
+        }], false);
+    }
+}
+
+module.exports = LinuxExtension;

extensions/linux/package.json

@@ -2,6 +2,7 @@
   "name": "ghost-cli-linux",
   "description": "general linux user configuration for Ghost",
   "version": "0.0.0",
+  "main": "index.js",
   "keywords":[
     "ghost-cli-extension"
   ]

extensions/systemd/index.js

@@ -2,6 +2,7 @@
 
 const fs = require('fs-extra');
 const path = require('path');
+const execa = require('execa');
 const template = require('lodash/template');
 
 const cli = require('../../lib');
@@ -11,18 +12,30 @@ class SystemdExtension extends cli.Extension {
         let instance = this.system.getInstance();
 
         if (!argv.local && instance.config.get('process') === 'systemd') {
-            cmd.addStage('systemd', this._setup.bind(this));
+            cmd.addStage('systemd', this._setup.bind(this), null, 'linux-user');
         }
     }
 
-    _setup(argv, ctx) {
+    _setup(argv, ctx, task) {
+        let uid;
+
+        try {
+            uid = execa.shellSync('id -u ghost').stdout;
+        } catch (e) {
+            if (!e.message.match(/no such user/)) {
+                return Promise.reject(e);
+            }
+
+            return task.skip('Ghost user has not been set up.');
+        }
+
         let service = template(fs.readFileSync(path.join(__dirname, 'ghost.service.template'), 'utf8'));
         let serviceFilename = `ghost_${ctx.instance.name}.service`;
 
         return ctx.instance.template(service({
             name: ctx.instance.name,
             dir: process.cwd(),
-            user: process.getuid(),
+            user: uid,
             environment: this.system.environment,
             ghost_exec_path: process.argv.slice(0,2).join(' ')
         }), 'systemd service file', serviceFilename, '/lib/systemd/system').then(() => {

package.json

@@ -41,6 +41,7 @@
     "abbrev": "^1.1.0",
     "bluebird": "3.5.0",
     "chalk": "1.1.3",
+    "chownr": "1.0.1",
     "cli-table2": "0.2.0",
     "crontab": "1.1.3",
     "debug": "2.6.8",

yarn.lock

@@ -397,7 +397,7 @@ check-error@^1.0.1:
   version "1.0.2"
   resolved "https://registry.yarnpkg.com/check-error/-/check-error-1.0.2.tgz#574d312edd88bb5dd8912e9286dd6c0aed4aac82"
 
-chownr@^1.0.1:
+chownr@1.0.1, chownr@^1.0.1:
   version "1.0.1"
   resolved "https://registry.yarnpkg.com/chownr/-/chownr-1.0.1.tgz#e2a75042a9551908bebd25b8523d5f9769d79181"